Privacy Policy
THE PURPOSE OF THE PRIVACY POLICY
The purpose of this page is to describe the procedures for managing the site with reference to the processing of the personal data of users that visit it. The processing of said data is carried out according to the principles of lawfulness, fairness, relevance, and is never excessive.
It is a privacy policy issued pursuant to arts. 13 and 14 of the New European Regulation – EU no. 679/16 on the protection of personal data (the GDPR) to those who interact with the web services of MW.FEP S.P.A. – based in via Mario Stoppani 23 – 34077 Ronchi dei Legionari (GO), accessible via the internet starting from the address: www.pregel.it, corresponding to the initial page of MW.FEP S.P.A.’s official website.
The privacy policy is issued solely for MW.FEP S.P.A.’s website and not also for other websites that may be visited by the user through links.
The privacy policy is provided according to recital (58) of EU Regulation no. 679/16 and recital (67) and according to a risk assessment as per the – Guidelines on the assessment of impact on the protection of data and determination of the possibility that the processing “may present a high risk” for the purposes of EU Regulation 2016/67– WP 248 of the working group, article 29, for the protection of data in order to clarify the methods, times and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of connection (the Transparency principle of the GDPR).
PLACE OF DATA PROCESSING
The processing operations connected with the web services of this site take place at the registered office of MW.FEP S.P.A. or of the supplier responsible for the Internet services and for hosting/housing our site and are carried out only by technical staff of the Office appointed for processing, or by staff assigned with occasional maintenance operations.
The processing of data occurs on the basis of their storage in computerized files, access to which is limited to maintenance procedures in compliance with attachment B (as per Leg. Dec. 196/03).
No datum deriving from the web service is communicated or disseminated.
The personal data provided by users that forward requests for the sending of informative material (newsletters, requests for information, catalogues, CD-ROMs, etc.) are used solely to perform the service or assistance requested and are communicated to third parties only in the event that this is necessary for the purpose (MW.FEP S.P.A. shipment services). Any other purpose shall be subject to a specific privacy policy issued to the data subject pursuant to arts. 13 and 14 of the GDPR.
The legal basis for processing is
- the execution of an agreement, for purposes associated with the provision of the services requested by the users as Customers of MW.FEP S.P.A. (without limitation: asking information, registering to the website to receive advantages and offers, obtaining estimates, making payment, purchase goods and receiving them at the address specified by the user, making a reservation, exchanging documents);
- the consent, for the purpose of sending business communications, by email o by sms, concerning services provided by the Controller.
TYPE OF DATA PROCESSED
Browsing data
The information systems and software procedures relied upon to operate this web site acquire personal data (e.g. log files) as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.
It is information which is not collected to be associated with identified data subjects, but by its nature could, through processes and associations with data held by third parties, permit the users’ identification.
This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, the numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment.
These data are used solely for the purpose of obtaining statistical information on use of the site and to check its correct functioning. The data could be used for ascertaining liability in the event of alleged cybercrime to the detriment of the site and may be submitted to the Judicial Authorities in the event they make an explicit request.
Data provided voluntarily by the user
The optional, explicit and voluntary forwarding of electronic mail to the addresses indicated on the site implies the subsequent acquisition of the address of the sender, necessary for responding to requests, as well as any other personal data included in the message.
Specific privacy policies as per art. 13 will be progressively reported or visualized in the pages of the site, drawn up for particular requested services.
OPTIONAL PROVISION OF DATA
Apart from what is specified for browsing data, the user is free to provide the personal data shown in any MW.FEP S.P.A. request forms (web forms) or, in any case, indicated in contacts with the Office to request the sending of informative material or other communications.
Their failed provision may imply the impossibility of obtaining what has been requested.
For completeness, it should be noted that in certain cases (not subject to the ordinary management of this site) the Italian Data Protection Agency may request information pursuant to art. 157 of the former Leg. Dec. no. 196/2003 and according to the GDPR, in order to carry out checks on the processing of personal data. In such cases, response is compulsory on penalty of administrative sanctions.
AUTHORIZATION OF PROCESSING
The data collected by means of the web forms of this site are subject to processing on the part “Persons tasked with processing” in MW.FEP S.P.A. in the ways and with the procedures established by our “Data Processor” according to the rules laid down by our “Data Controller” and in compliance with the regulations in force (GDPR – EU Regulation no. 679/16), guaranteeing the rights of lawfulness, fairness and confidentiality.
Authorizations of processing are monitored by the “Data Protection Officer” (DPO) of the company MW.FEP S.P.A.
COMMUNICATION AND DISSEMINATION
Your data may be subject to communication (also abroad) to subsidiaries, parent and affiliated companies in any legal form of MW.FEP S.P.A.; the protection of your data shall, in all events, be guaranteed by means of regulation of the processing (formalization of outsourcing responsibilities and appointments).
TRANSFERS OF DATA TO FOREIGN COUNTRIES
No transfer of the collected personal data to non-EU countries is foreseen.
DATA RETENTION PERIOD
The personal data collected for the above purposes shall be kept by our company for as long as required for the relevant activities and for the periods provided for by law, after which they shall be destroyed (the right to be forgotten) or made available in anonymous form (pseudonymization) if necessary for statistical historicization purposes.
DATA SUBJECTS’ RIGHTS
With relation to the aforementioned processing operations, the rights as per arts. 15, 16, 17, 18 e 19 of the GDPR – EU Regulation no. 679/16 (right of Access, Modification, Cancellation, Limitation of the processing and Notification in cases of Modification/Cancellation/Limitation on the part of the Data Controller) may be exercised. Requests for the exercise of the rights should be forwarded to MW.FEP S.P.A. to the company address.
NAMES OF CONTACT PERSONS WITH RELATION TO OUR CAPACITY AS DATA CONTROLLER
Francesco Fanelli
in his capacity as Legal Representative of MW.FEP S.P.A., autonomous “Data Controller” (DC),
PARIDE BOTTAJOLI
in his capacity as “Data Processor” (DP) of MW.FEP S.P.A.,
VALERIANO MAIOGLIO
in his capacity as “ Data Protection Officer” (DPO), of MW.FEP S.P.A.